The E-net model for the Risk Analysis and Assessment System for the Information Security of Communication and Information Systems ("Defining" Subsystem)

TL;DR

This paper introduces the E-net model for the 'Defining' subsystem to enhance risk analysis and assessment in communication and information system security, based on experience with Bulgarian Armed Forces systems.

Contribution

It presents a novel E-net model for the 'Defining' subsystem, improving risk analysis in communication and information security systems.

Findings

E-net model effectively examines subsystems

Applicable to military and business communication systems

Enhances risk assessment accuracy

Abstract

This paper presents one suggestion that comprises the authors' experience in development and implementation of systems for information security in the Automated Information Systems of the Bulgarian Armed Forces. The architecture of risk analysis and assessment system for the communication and information system's information security (CIS IS) has been presented. E-net model of "Defining" Subsystem as a tool that allows to examine the subsystems is proposed as well. Such approach can be applied successfully for communication and information systems in the business field.